This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/0NoPiisJbpwmvBUWEe2px9KfACQ.roa File: 0NoPiisJbpwmvBUWEe2px9KfACQ.roa (raw, json) Hash identifier: fADYU9aKvqcndQu+aoL/npU6GSJIZV+Rd4qVL1uAf08= Subject key identifier: D0:DA:0F:8A:2B:09:6E:9C:26:BC:15:16:11:ED:A9:C7:D2:9F:00:24 Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8 Certificate serial: 019B78A2343FBA00DB384EA1820511E9E998 Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/0NoPiisJbpwmvBUWEe2px9KfACQ.roa Signing time: Thu 01 Jan 2026 08:17:34 +0000 ROA not before: Thu 01 Jan 2026 08:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41998 IP address blocks: 194.76.2.0/24 maxlen: 24 194.76.3.0/24 maxlen: 24 194.76.4.0/24 maxlen: 24 194.76.5.0/24 maxlen: 24 194.76.6.0/24 maxlen: 24 194.76.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:34:3f:ba:00:db:38:4e:a1:82:05:11:e9:e9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8 Validity Not Before: Jan 1 08:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0da0f8a2b096e9c26bc151611eda9c7d29f0024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:39:e0:81:9f:1d:f2:ca:bf:e0:f7:26:3e:6c: cb:e0:b6:19:48:fe:a6:f0:a7:1c:53:36:4a:ae:52: f4:0d:cc:38:f6:f5:5c:1e:51:84:de:26:48:6e:75: cb:0c:a3:a0:36:fc:97:59:5f:00:b4:63:8c:11:81: 2f:fd:ae:e8:45:57:f3:55:b4:ce:5d:ae:60:94:15: 58:88:62:dd:5e:7d:80:49:8a:83:78:04:3a:be:07: f6:6d:5e:70:d7:e2:b3:c6:c9:48:8f:23:cb:80:f6: 75:d8:e4:78:24:3f:30:1e:07:77:7d:b0:15:94:b9: 18:68:eb:f8:29:0d:59:60:4c:49:d9:80:0b:9c:2c: 86:8c:5c:14:9a:98:56:89:f7:1b:14:a0:b7:2f:e6: 68:73:82:d2:f6:ae:4c:7c:54:21:ae:28:07:da:b9: 7f:b5:cf:cc:65:d7:a1:74:0a:b7:65:56:b7:be:b2: 51:fa:d9:4b:e9:cd:11:d3:f6:57:cc:0a:50:d2:f6: 72:1b:69:e0:a8:c2:40:44:7a:c2:ed:f3:bc:b1:ab: a1:ed:09:7a:e0:19:44:52:f3:4b:5d:fa:f8:b2:79: 28:1b:a6:65:80:77:bf:e8:49:30:08:39:50:fd:e8: 85:b4:60:f4:12:b4:ac:a2:88:3c:c6:92:58:2a:71: 4e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DA:0F:8A:2B:09:6E:9C:26:BC:15:16:11:ED:A9:C7:D2:9F:00:24 X509v3 Authority Key Identifier: keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/0NoPiisJbpwmvBUWEe2px9KfACQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.2.0-194.76.7.255 Signature Algorithm: sha256WithRSAEncryption 5b:20:bc:e8:a3:76:32:77:90:4b:7a:1d:1e:72:eb:ea:11:db: 42:b0:cd:be:d7:e5:dc:f4:8c:87:ec:d5:a2:10:36:7e:97:e7: f4:01:62:83:98:ea:33:2c:80:c3:d8:5d:2b:ab:e8:6c:d3:e1: c9:a2:3c:a0:e7:d2:1b:66:46:34:59:bd:25:6f:ea:cc:cb:3e: a0:3b:3d:dd:07:c6:e1:97:73:ed:c3:5d:e3:c9:74:79:3c:34: 8a:ae:a7:fe:3d:d2:7e:72:ce:78:93:81:8a:45:6a:8e:6d:cf: f6:b2:a5:ab:c0:82:9b:94:c4:77:a8:04:fb:91:41:c0:d5:52: c9:37:37:3f:83:a7:9b:1a:79:62:d5:65:69:c4:36:32:de:28: 1f:b8:46:c7:61:cc:4f:cd:38:b1:a3:5c:73:06:4e:b7:2f:3f: 68:a5:c3:64:6f:ea:50:f6:5f:6d:89:d9:fb:d3:85:0c:c4:45: 39:25:61:49:06:b8:f2:36:79:6b:76:4d:5b:be:87:68:c0:52: 2e:d1:78:fb:18:e9:89:7a:63:cf:72:76:eb:fd:a5:4e:51:44: 52:b0:7f:f0:63:eb:f7:c1:13:0f:4b:31:be:52:26:dd:8c:46: 5b:0d:73:b5:5e:33:bf:56:a6:0b:45:59:da:bc:dc:8d:38:21: 93:7a:77:df -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4ojQ/ugDbOE6hggUR6emYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzQ4NzQ3MmQzN2NiZDcyNjE4MWY5ZjNhMjAzODZmMDM5 YjNiYTgwHhcNMjYwMTAxMDgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGRhMGY4YTJiMDk2ZTljMjZiYzE1MTYxMWVkYTljN2QyOWYwMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TnggZ8d8sq/4PcmPmzL4LYZSP6m 8KccUzZKrlL0Dcw49vVcHlGE3iZIbnXLDKOgNvyXWV8AtGOMEYEv/a7oRVfzVbTO Xa5glBVYiGLdXn2ASYqDeAQ6vgf2bV5w1+KzxslIjyPLgPZ12OR4JD8wHgd3fbAV lLkYaOv4KQ1ZYExJ2YALnCyGjFwUmphWifcbFKC3L+Zoc4LS9q5MfFQhrigH2rl/ tc/MZdehdAq3ZVa3vrJR+tlL6c0R0/ZXzApQ0vZyG2ngqMJARHrC7fO8sauh7Ql6 4BlEUvNLXfr4snkoG6ZlgHe/6EkwCDlQ/eiFtGD0ErSsoog8xpJYKnFOUwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNDaD4orCW6cJrwVFhHtqcfSnwAkMB8GA1UdIwQY MBaAFFl0h0ctN8vXJhgfnzogOG8DmzuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMt MDM1MjgxMjg5YmIwLzEvME5vUGlpc0picHdtdkJVV0VlMnB4OUtmQUNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMtMDM1MjgxMjg5YmIw LzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHCTAID BAPCTAAwDQYJKoZIhvcNAQELBQADggEBAFsgvOijdjJ3kEt6HR5y6+oR20Kwzb7X 5dz0jIfs1aIQNn6X5/QBYoOY6jMsgMPYXSur6GzT4cmiPKDn0htmRjRZvSVv6szL PqA7Pd0HxuGXc+3DXePJdHk8NIqup/490n5yzniTgYpFao5tz/aypavAgpuUxHeo BPuRQcDVUsk3Nz+Dp5saeWLVZWnENjLeKB+4RsdhzE/NOLGjXHMGTrcvP2ilw2Rv 6lD2X22J2fvThQzERTklYUkGuPI2eWt2TVu+h2jAUi7RePsY6Yl6Y89yduv9pU5R RFKwf/Bj6/fBEw9LMb5SJt2MRlsNc7VeM79WpgtFWdq83I04IZN6d98= -----END CERTIFICATE-----Generated at Wed Jan 21 15:21:34 2026 by rpki-client